Privacy Policy Disclaimer: 

This document was created as a template for informational purposes only. By using it, you accept this disclaimer and acknowledge that Webnode is not responsible for any actions or content on this website. We recommend that you seek legal assistance and modify this document to suit the needs of your business. Iloinen kauneushoitola Oy on the website with business ID 3142289-8 in Jyväskylä processes the personal data provided by the customer, which fulfill and confirm the terms of use, handling of electronic orders and deliveries, and necessary communication within the time required by law.

General Provisions

1. The data controller, who complies with the GDPR regulation (hereinafter referred to as "the regulation"), is Iloinen kauneushoitola Oy, business ID 3142289-8, located in Jyväskylä (hereinafter referred to as "the Controller");

2. The contact details of the Controller are: email: studiockaari@gmail.com, phone: 0449780607

3. Personal data refers to any information relating to an identified or identifiable natural person.

Source of Personal Data

1. The data controller processes personal data received with the customer's consent, which has been collected based on a contract for obtaining and fulfilling an online store's electronic order.

2. The data controller processes only the customer's identification and contact information, which are necessary for fulfilling the purchase agreement.

3. The data controller processes personal data for shipping and accounting purposes, as well as for the necessary communication of information between the contracting parties for the duration required by law. Personal data is not disclosed or transferred to other countries.

Purpose of Data Processing

The Data Controller processes the Customer's personal data for the following purposes:1. Registration of the website in accordance with Chapter 4, Section 2 of the GDPR;2. Electronic order created by the Customer (name, address, email, phone number);3. To comply with the law and regulations arising from the contractual relationship between the Customer and the Data Controller;4. Personal data is necessary for the fulfillment of the purchase agreement. The agreement cannot be made without personal data.
 

Duration of Personal Data Storage

1. The Data Controller stores personal data for as long as necessary to fulfill the rights and obligations arising from the contractual relationship between the Data Controller and the Customer and for three years after the termination of the contractual relationship;

2. The Data Controller must delete all personal data after the necessary retention period for personal data has elapsed.

Recipients and Processors of Personal Data

Third parties processing the Customer's personal data are subcontractors of the Data Controller. The services of these subcontractors are essential for executing the contract concerning the acquisition and processing of electronic orders between the Data Controller and the Customer.

The Data Controller's subcontractors include:- Webnode AG (e-commerce system);- Freight company;- Google Analytics (website analytics).

Customer Rights

According to the Regulation, the Customer has the right to:

1. the right to access personal data; 

2. the right to rectify personal data;

3. the right to erasure of personal data;

4. the right to object to the processing of personal data;

5. the right to data portability;

6. the right to withdraw consent for the processing of personal data in writing or via email to the address: [….];

7. the right to lodge a complaint with a supervisory authority if a violation of the Regulation is suspected.

Personal Data Security

1. The data controller commits to implementing all necessary technical and organizational precautions to protect personal data.

2. The data controller has taken technical measures to secure data storage facilities, particularly by ensuring access to the computer with a password, using antivirus software, and maintaining computers regularly.

Final Provisions

1. By placing an electronic order on the website of Iloinen Kauneushoitola Oy, the Customer confirms that they are aware of all data protection terms and fully accept them;

2. The Customer accepts these rules by checking the checkbox in the order form;

3. The data controller may update these Rules at any time. The new, updated version must be published on this webpage.

These rules will come into effect on January 1, 2024.<

/p>